Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
File: H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft (raw, json)
Hash identifier: Ee+THkIqpyOulDemGLHLx3u0MdGwBysQfgJDHGYiZhw=
Subject key identifier: 44:8D:9C:D2:05:74:6E:63:4B:11:D8:3B:B5:21:56:ED:2F:A0:01:1A
Authority key identifier: 1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5
Certificate issuer: /CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5
Certificate serial: 019D26CD0BB7F99D87ADEF5DE0FE5507C625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
Manifest number: 0D8B
Signing time: Wed 25 Mar 2026 21:01:05 +0000
Manifest this update: Wed 25 Mar 2026 21:01:05 +0000
Manifest next update: Thu 26 Mar 2026 21:01:05 +0000
Files and hashes: 1: H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl (hash: lVtqyuFrxlZ1JfS6JQAlx5og2gxB0OKJ00BWOrujFdk=)
2: afKBlYSGIMBV_VMkuFvv4MisLCI.roa (hash: s1e49FrGfKuZntD2cZ980PigitairMSPS2lGbyZKLV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:0b:b7:f9:9d:87:ad:ef:5d:e0:fe:55:07:c6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5
Validity
Not Before: Mar 25 21:01:05 2026 GMT
Not After : Mar 26 21:01:05 2026 GMT
Subject: CN=448d9cd205746e634b11d83bb52156ed2fa0011a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:90:6f:0e:6f:28:07:1e:f9:7e:e3:d0:e8:33:
e9:a1:be:20:a9:e5:17:78:2b:b2:4a:65:d5:31:48:
54:0a:3d:c4:fa:df:25:94:62:1d:07:58:9e:e2:6d:
db:d7:85:ff:c7:9f:1e:23:62:2e:03:67:32:eb:c4:
b6:2a:1c:a8:bf:0f:e2:76:3b:f0:a0:a1:90:ab:31:
8c:df:7d:f8:59:7f:2e:ec:5b:2a:c2:b0:25:b1:76:
62:80:40:87:a8:00:53:1a:a9:9c:00:f1:ba:10:55:
4f:6f:32:92:16:14:46:ee:f3:57:b5:b7:61:d9:58:
18:a4:a8:ef:30:93:e8:c5:f6:50:b5:98:f4:5f:20:
e8:55:b7:01:d1:f5:d4:28:98:c4:89:17:6c:31:7a:
63:c7:35:57:8c:19:e1:f2:00:b5:59:e7:0e:ba:d4:
9e:57:73:3c:64:51:59:5f:c2:05:c0:71:fd:fb:76:
bc:ea:b3:78:28:cb:a0:91:3d:fa:41:74:cc:a2:27:
20:e7:6d:ad:78:86:29:0f:22:62:c7:f2:01:b3:14:
09:34:ce:31:63:f9:45:6c:35:2d:37:bf:48:a0:54:
c0:14:a2:16:fc:d7:50:73:3a:f5:8d:1f:cd:41:a7:
a6:df:96:34:09:88:75:38:ca:a6:87:bd:83:ba:e2:
3a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8D:9C:D2:05:74:6E:63:4B:11:D8:3B:B5:21:56:ED:2F:A0:01:1A
X509v3 Authority Key Identifier:
keyid:1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:cc:05:ee:5b:5c:91:39:50:47:2d:41:54:58:b7:25:7b:23:
b3:ea:b0:17:58:a1:80:2f:c4:af:77:62:cb:7f:5b:e2:f7:b0:
79:93:d8:77:32:f8:4a:09:dc:12:a8:e5:a3:f9:7b:52:05:86:
d7:20:ef:3c:d3:3f:18:71:c4:16:de:f4:0d:ab:fe:26:0a:2f:
6c:ce:9e:66:18:cf:2b:10:17:af:c4:a7:21:b2:01:ba:4b:58:
1e:bc:08:c6:e5:56:b9:97:63:68:05:24:dd:ac:2e:ce:29:6b:
61:a8:c4:a2:a5:e1:1f:b0:03:e5:6a:2c:6f:7d:2c:56:a9:bf:
ae:b2:aa:85:70:d6:2b:cb:d1:1e:1b:ce:4b:93:fb:7b:b0:98:
72:96:62:ae:4f:f7:0e:ba:b0:fa:3e:7a:33:6a:97:9d:a5:ed:
66:27:27:2e:d3:63:f5:30:5d:11:f0:b4:a4:00:b3:e8:44:eb:
c0:90:12:6d:63:2b:6c:c8:5e:4f:5e:0a:45:bd:1d:55:db:66:
93:49:b0:ed:04:31:07:5b:62:7e:6a:57:7e:76:a5:bd:f2:15:
da:29:4d:24:81:69:0f:b1:79:a4:97:b5:ea:92:5c:71:8e:4d:
44:b2:97:42:27:44:0a:c3:b7:fd:d1:d1:a7:be:83:73:06:9c:
7f:7e:01:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:41 2026 by rpki-client